Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. rolesanywhere
  5. getProfile

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.rolesanywhere.getProfile

Explore with Pulumi AI

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native

Definition of AWS::RolesAnywhere::Profile Resource Type

Using getProfile

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getProfile(args: GetProfileArgs, opts?: InvokeOptions): Promise<GetProfileResult>
function getProfileOutput(args: GetProfileOutputArgs, opts?: InvokeOptions): Output<GetProfileResult>
Copy
def get_profile(profile_id: Optional[str] = None,
                opts: Optional[InvokeOptions] = None) -> GetProfileResult
def get_profile_output(profile_id: Optional[pulumi.Input[str]] = None,
                opts: Optional[InvokeOptions] = None) -> Output[GetProfileResult]
Copy
func LookupProfile(ctx *Context, args *LookupProfileArgs, opts ...InvokeOption) (*LookupProfileResult, error)
func LookupProfileOutput(ctx *Context, args *LookupProfileOutputArgs, opts ...InvokeOption) LookupProfileResultOutput
Copy

> Note: This function is named LookupProfile in the Go SDK.

public static class GetProfile 
{
    public static Task<GetProfileResult> InvokeAsync(GetProfileArgs args, InvokeOptions? opts = null)
    public static Output<GetProfileResult> Invoke(GetProfileInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetProfileResult> getProfile(GetProfileArgs args, InvokeOptions options)
public static Output<GetProfileResult> getProfile(GetProfileArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: aws-native:rolesanywhere:getProfile
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

ProfileId This property is required. string
The unique primary identifier of the Profile
ProfileId This property is required. string
The unique primary identifier of the Profile
profileId This property is required. String
The unique primary identifier of the Profile
profileId This property is required. string
The unique primary identifier of the Profile
profile_id This property is required. str
The unique primary identifier of the Profile
profileId This property is required. String
The unique primary identifier of the Profile

getProfile Result

The following output properties are available:

AcceptRoleSessionName bool
Used to determine if a custom role session name will be accepted in a temporary credential request.
AttributeMappings List<Pulumi.AwsNative.RolesAnywhere.Outputs.ProfileAttributeMapping>
A mapping applied to the authenticating end-entity certificate.
DurationSeconds double
The number of seconds vended session credentials will be valid for
Enabled bool
The enabled status of the resource.
ManagedPolicyArns List<string>
A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
Name string
The customer specified name of the resource.
ProfileArn string
The ARN of the profile.
ProfileId string
The unique primary identifier of the Profile
RoleArns List<string>
A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
SessionPolicy string
A session policy that will applied to the trust boundary of the vended session credentials.
Tags List<Pulumi.AwsNative.Outputs.Tag>
A list of Tags.
AcceptRoleSessionName bool
Used to determine if a custom role session name will be accepted in a temporary credential request.
AttributeMappings []ProfileAttributeMapping
A mapping applied to the authenticating end-entity certificate.
DurationSeconds float64
The number of seconds vended session credentials will be valid for
Enabled bool
The enabled status of the resource.
ManagedPolicyArns []string
A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
Name string
The customer specified name of the resource.
ProfileArn string
The ARN of the profile.
ProfileId string
The unique primary identifier of the Profile
RoleArns []string
A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
SessionPolicy string
A session policy that will applied to the trust boundary of the vended session credentials.
Tags Tag
A list of Tags.
acceptRoleSessionName Boolean
Used to determine if a custom role session name will be accepted in a temporary credential request.
attributeMappings List<ProfileAttributeMapping>
A mapping applied to the authenticating end-entity certificate.
durationSeconds Double
The number of seconds vended session credentials will be valid for
enabled Boolean
The enabled status of the resource.
managedPolicyArns List<String>
A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
name String
The customer specified name of the resource.
profileArn String
The ARN of the profile.
profileId String
The unique primary identifier of the Profile
roleArns List<String>
A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
sessionPolicy String
A session policy that will applied to the trust boundary of the vended session credentials.
tags List<Tag>
A list of Tags.
acceptRoleSessionName boolean
Used to determine if a custom role session name will be accepted in a temporary credential request.
attributeMappings ProfileAttributeMapping[]
A mapping applied to the authenticating end-entity certificate.
durationSeconds number
The number of seconds vended session credentials will be valid for
enabled boolean
The enabled status of the resource.
managedPolicyArns string[]
A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
name string
The customer specified name of the resource.
profileArn string
The ARN of the profile.
profileId string
The unique primary identifier of the Profile
roleArns string[]
A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
sessionPolicy string
A session policy that will applied to the trust boundary of the vended session credentials.
tags Tag[]
A list of Tags.
accept_role_session_name bool
Used to determine if a custom role session name will be accepted in a temporary credential request.
attribute_mappings Sequence[ProfileAttributeMapping]
A mapping applied to the authenticating end-entity certificate.
duration_seconds float
The number of seconds vended session credentials will be valid for
enabled bool
The enabled status of the resource.
managed_policy_arns Sequence[str]
A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
name str
The customer specified name of the resource.
profile_arn str
The ARN of the profile.
profile_id str
The unique primary identifier of the Profile
role_arns Sequence[str]
A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
session_policy str
A session policy that will applied to the trust boundary of the vended session credentials.
tags Sequence[root_Tag]
A list of Tags.
acceptRoleSessionName Boolean
Used to determine if a custom role session name will be accepted in a temporary credential request.
attributeMappings List<Property Map>
A mapping applied to the authenticating end-entity certificate.
durationSeconds Number
The number of seconds vended session credentials will be valid for
enabled Boolean
The enabled status of the resource.
managedPolicyArns List<String>
A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.
name String
The customer specified name of the resource.
profileArn String
The ARN of the profile.
profileId String
The unique primary identifier of the Profile
roleArns List<String>
A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.
sessionPolicy String
A session policy that will applied to the trust boundary of the vended session credentials.
tags List<Property Map>
A list of Tags.

Supporting Types

ProfileAttributeMapping

CertificateField This property is required. Pulumi.AwsNative.RolesAnywhere.ProfileCertificateField
Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.
MappingRules This property is required. List<Pulumi.AwsNative.RolesAnywhere.Inputs.ProfileMappingRule>
A list of mapping entries for every supported specifier or sub-field.
CertificateField This property is required. ProfileCertificateField
Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.
MappingRules This property is required. []ProfileMappingRule
A list of mapping entries for every supported specifier or sub-field.
certificateField This property is required. ProfileCertificateField
Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.
mappingRules This property is required. List<ProfileMappingRule>
A list of mapping entries for every supported specifier or sub-field.
certificateField This property is required. ProfileCertificateField
Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.
mappingRules This property is required. ProfileMappingRule[]
A list of mapping entries for every supported specifier or sub-field.
certificate_field This property is required. ProfileCertificateField
Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.
mapping_rules This property is required. Sequence[ProfileMappingRule]
A list of mapping entries for every supported specifier or sub-field.
certificateField This property is required. "x509Subject" | "x509Issuer" | "x509SAN"
Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates.
mappingRules This property is required. List<Property Map>
A list of mapping entries for every supported specifier or sub-field.

ProfileCertificateField

ProfileMappingRule

Specifier This property is required. string
Specifier within a certificate field, such as CN, OU, or UID from the Subject field.
Specifier This property is required. string
Specifier within a certificate field, such as CN, OU, or UID from the Subject field.
specifier This property is required. String
Specifier within a certificate field, such as CN, OU, or UID from the Subject field.
specifier This property is required. string
Specifier within a certificate field, such as CN, OU, or UID from the Subject field.
specifier This property is required. str
Specifier within a certificate field, such as CN, OU, or UID from the Subject field.
specifier This property is required. String
Specifier within a certificate field, such as CN, OU, or UID from the Subject field.

Tag

Key This property is required. string
The key name of the tag
Value This property is required. string
The value of the tag
Key This property is required. string
The key name of the tag
Value This property is required. string
The value of the tag
key This property is required. String
The key name of the tag
value This property is required. String
The value of the tag
key This property is required. string
The key name of the tag
value This property is required. string
The value of the tag
key This property is required. str
The key name of the tag
value This property is required. str
The value of the tag
key This property is required. String
The key name of the tag
value This property is required. String
The value of the tag

Package Details

Repository
AWS Native pulumi/pulumi-aws-native
License
Apache-2.0

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.26.0 published on Wednesday, Mar 12, 2025 by Pulumi
pulumi/pulumi-aws-native